How to 'un-sign' a key?

Joel C. Salomon joelcsalomon at gmail.com
Thu May 7 16:50:06 CEST 2009


Joel C. Salomon wrote:
> I foolishly signed a key I had not verified well, and the signed version
> is on a keyserver. How can I unsign it?
>
> I have tried the following (changing the key ID to 0xDEADBEEF):
<snip>

I tried the command again; not sure why I got a different result:

> C:\Users\chesky>"c:\Program Files\GNU\GnuPG\gpg.exe" --edit-key 0xDEADBEEF
> gpg (GnuPG) 1.4.9; Copyright (C) 2008 Free Software Foundation, Inc.
> This is free software: you are free to change and redistribute it.
> There is NO WARRANTY, to the extent permitted by law.
>
>
> pub  4096R/DEADBEEF  created: 2008-08-27  expires: 2010-08-27  usage: SCEA
>                      trust: undefined     validity: full
> [  full  ] (1). Mister Magoo <mister at magoo.not>
>
> Command> revsig
> You have signed these user IDs on key DEADBEEF:
>      Mister Magoo <mister at magoo.not>
>    signed by your key 8C6CA66E on 2009-02-10
>
> user ID: "Mister Magoo <mister at magoo.not>"
> signed by your key 8C6CA66E on 2009-02-10
> Create a revocation certificate for this signature? (y/N) y
> You are about to revoke these signatures:
>      Mister Magoo <mister at magoo.not>
>    signed by your key 8C6CA66E on 2009-02-10
> Really create the revocation certificates? (y/N) y
> Please select the reason for the revocation:
>   0 = No reason specified
>   4 = User ID is no longer valid
>   Q = Cancel
> Your decision? 0
> Enter an optional description; end it with an empty line:
> > Key was insufficiently verified before signing.
> >
> Reason for revocation: No reason specified
> Key was insufficiently verified before signing.
> Is this okay? (y/N) y
>
> You need a passphrase to unlock the secret key for
> user: "Joel C. Salomon <joelcsalomon at gmail.com>"
> 1024-bit DSA key, ID 8C6CA66E, created 2009-02-05
<entered passphrase>
>
> pub  4096R/DEADBEEF  created: 2008-08-27  expires: 2010-08-27  usage: SCEA
>                      trust: undefined     validity: full
> [  full  ] (1). Mister Magoo <mister at magoo.not>
>
> Command>

Okay, now what do I do?

—Joel Salomon

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20090507/7c496801/attachment.pgp>


More information about the Gnupg-users mailing list